Outt
Sett
Behavioral task
behavioral1
Sample
da0971d108585d40db088609341ba7fb_JaffaCakes118.dll
Resource
win7-20240903-en
Target
da0971d108585d40db088609341ba7fb_JaffaCakes118
Size
59KB
MD5
da0971d108585d40db088609341ba7fb
SHA1
8801c1252b845d1e20585b5e8b78d85c19b6e8f8
SHA256
14962fa0c3cb2b5bff2094c800383b0cf060e6bffbaf9664472ee96ed6c6a22a
SHA512
f2e761da3c075206a93a9e8f4675c1c65e981d00a9befc71da769c9187f7c8d2e91fef0aa84337b36c182bd7b52fcfe7cc2f003b6798da3da9f1783f0eb0fb10
SSDEEP
1536:ev6PE21MgAQadV8dPDwRKZkWnLLAOLdTEbQ:9DAfdy98RK66n9xTx
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da0971d108585d40db088609341ba7fb_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Outt
Sett
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ